1. Compare Against Analytic KB
Recognize Events A2
Isolate Events
Extract event attributes and relationships
Index to records
Processing Updates to Audits KB
Indexed Validated Event Records to Graph KB
Validated Attributes to Graph KB
Validated Relationships
Validated Relationship Records
COI’s from
COI KB
EOI Attributes
from EOI KB
A21
Compare Against Analytic KB
Match attributes
Match relationships
Processing Updates to Audits KB
Rules From
Rules KB
Matched
“Wanted”
Attributes
A22
Trigger
Actions
Automatically
Processing Updates to
Audits KB
Alerts to Interested Parties
Matched “Wanted” Relationships
Systems Mgt. Actions to A81
A23
WAN to Interested Parties